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DETAILED ACTION 
Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 1 02 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

2. Claims 1-26, 28-32 are rejected under 35 U.S.C. 103(a) as being unpatentable over Grube 
et al. in view of Anderson, Jr. 

3. Grube et al. discloses a method of providing varying levels of security in a data 
processing system(405)(see fig. 4, sheet 3, col. 2, lines 39-57), receiving information from an 
outside source(see col. 2, lines 58-67, col. 3, lines 1-20); retrieving an indicator from the 
received information that instructs the system to operate at a higher level of security(see col. 3, 
lines 39-62, col. 5, lines 25-38). Grube et al. discloses to prevent operation at a lower level of 
security until information is received by the system to authorize a decrease in security levels, 
because if the acknowledgement is not received, or if the acknowledgement was not constructed 
with the proper transmission security level parameters, then the process ends(see col. 7, lines 53- 
65). 

4. However, Grube et al. fails to disclose continuing operation of the processing system. 
Anderson, Jr. does disclose continuing operation of the processing system, because Anderson, Jr 
discloses that within a call made by an unauthorized user, the security level can be adjusted, 
either by increasing or decreasing the security level(see col. 12, lines 37-65). 
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5. It would have been obvious to one of ordinary skill in the art to combine Grube with 
Anderson, Jr. because both are analogous in the art of wireless communication. The motivation 
to combine Grube et al with the feature of Anderson, Jr. that includes continuing operation of 
the processing system, is because it is highly desirable to have a new and improved security 
arrangement which requires the user to interact with the system to prevent access by an 
unauthorized user in such a manner that it would not be cost effective to defeat the security 
interposed for gaining access to the system(see col. 3, lines 36-43 of Anderson, Jr.), 

4. As per claim 2, the same motivation applies above, also, Grube et al. discloses receiving 
an encrypted message(see col. 4, lines 7-20). 

5. As per claim 3, Grube et al. discloses wherein said Decreased-Security Authorization- 
Code authorizes a decrease in encrypt ion/decrypt ion levels(see col. 3, lines 45-65). 

6. As per claim 4, Grube et al. discloses wherein said Decreased-Security Authorization- 
Code authorizes a decrease in authentication level(see col. 3, lines 45-65). 

7. As per claim 5, Grube et al. discloses wherein said Decreased-Security Authorization- 
Code authorizes a decrease in authentication level and a decrease in encryption/decryption 
levels(see col. 3, lines 45-65). 

8. As per claim 6, Grube et al. discloses wherein said encrypted message further comprises 
a key for use in a decryption algorithm(see col. 4, lines 7-45). 

9. As per claim 7, stores a master key(i.e. unique user key) to decrypt messages includes 
new decryption key values and using said master key stored at said system to decrypt said 
encrypted message(see col. 3, lines 59-67, col. 4, lines 1-45). 
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10. As per claim 8, Grube et al. discloses establishing a Security-Level-Status-Indicator at 
said system to indicate a level of security that is being implemented(see fig. 3, sheet 2). 

11. As per claim 9, Grube et al. discloses said Security-Level-Status Indicator indicates a 
level of encryption/decryption that is being implemented by the system(see fig. 3, sheet 2, col. 3, 
lines 59-65, col. 5, lines 26-44). 

12. As per claim 10, Grube et al. discloses said Security-Level-Status Indicator indicates a 
level of authentication that is being implemented by the system(see col. 3, lines 59-67). 

13. As per claim 11, said Security-Level- Status Indicator indicates a level of authentication 
and a level of encryption/decryption that is being implemented by the system(see col. 3, lines 45- 
65). 

14. As per claim 12, Grube et al. does not disclose configuring said Security Level Status 
Indicator to indicate more than two security levels so as to allow said system to utilize more than 
two security levels; however, the Examiner asserts that it would have been obvious to include 
Grube et al. to have more than two security levels, the motivation is that it increases security of 
the communication unit of Grube. 

15. As per claim 13, Grube et al. does not disclose utilizing a cable head-end as said outside 
source; however, the Examiner asserts that it would have been obvious to utilize a cable head- 
end as an outside source, the motivation is that a cable head-end provides faster transmission. 

16. As per claim 14, Grube et al. discloses using a Key Management Message to convey said 
Decreased Security Authorization Code(see col. 3, lines 45-65). 

1 7. As per claim 1 5, Grube et al. discloses wherein delivery of said Key Management 
Message is authenticated(see col. 36-47). 
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18. As per claim 16, Grube et al. discloses wherein delivery of said Key Management 
Message is protected against a replay attack(see col. 7, lines 35-65). 

19. As per claim 17, Grube et al. discloses wherein delivery of said Key Management 
Message is authenticated and protected against a replay attack(see col. 8, lines 1-30). 

20. As per claim 18, Grube et al. discloses wherein a lower level of security is nonpublic Key 
mode, wherein a higher level of security is a public Key mode, continuing operation of the 
system in the public Key mode until an encrypted predefined message is received by the system 
from the outside source(see col. 3, lines 53-65). 

21. As per claim 1 9, rejected under the same basis as claim 7. 

22. As per claim 20, recites limitations already rejected(see claims 1 and 12). 

23 As per claim 21, Grube et al. discloses a cryptographic device an input to receive a 
datastream; a Security -Level-Status-Indicator; and code means for executing a cryptographic 
algorithm wherein said cryptographic algorithm is indicated by said Security-Level-Status- 
Indicator(see col. 3, lines 59-67, col. 5, lines 26-44, fig. 3, sheet 2), and a code means for 
decrypting a decreased security authorization code(see col. 7, lines 24-35). 

24. As per claim 22, Grube et al. discloses wherein said code means for executing a 
cryptographic algorithm comprises code means for executing a high level cryptographic 
algorithm and code means for executing a low level cryptographic algorithm relative to said high 
level cryptographic algorithm(see fig. 3, lines 59-67). 

25. As per claim 23, Grube et al. discloses wherein said high level cryptographic algorithm 
comprises a high level decryption algorithm and wherein said low level cryptographic algorithm 
comprises a low level decryption algorithm(see col. 3, lines 53-65). 
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26. As per claim 24, Grube et al. discloses wherein said high level cryptographic algorithm 
comprises a high level authentication algorithm and wherein said low level cryptographic 
algorithm comprises a low level authentication algorithm(see col. 7, lines 24-35). 

27. As per claim 25, Grube et al. discloses wherein said high level cryptographic algorithm 
comprises a high level decryption algorithm and a high level authentication algorithm and 
wherein said low level cryptographic; algorithm comprises a low level decryption algorithm and 
a low level authentication algorithm(see col. 3, lines 59-67, col. 7, lines 24-35) . 

28. As per claim 26, Grube et al. discloses wherein said high level cryptographic algorithm is 
a public Key encryption algorithm and wherein said low level cryptographic algorithm is a non- 
public Key encryption algorithm(see col. 3, lines 53-65). 

29. As per claim 28, Grube et al. discloses and means for preventing a replay attack in 
delivery of said Decreased-Security Authorization-Code(see col. 8, lines 1-30). 

30. As per claim 29, Grube et al. discloses a master key to use in decrypting said Decreased 
Security Authorization Code(see col. 3, lines 59-67, col. 4, lines 1-45). 

31. As per claim 30, Grube et al. discloses wherein said Security Level Status Indicator is 
encrypted(see col. 7, lines 36-50). 

32. As per claim 31, Grube et al. discloses providing a receiver to receive a transmission(see 
col. 2, lines 58-67, col. 3, lines 1-20); establishing a Security-Level-Status-Indicator at said 
receiver(see col. 3, lines 59-67); establishing a first level of decryption at said receiver(see col. 3, 
lines 59-67, col. 4, lines 1-20); encrypting a first message at a first level of encryption(see col. 3, 
lines 59-67, col. 4, lines 1-20); transmitting said first message to said receiver at said first level 
of encryption(see col. 2, lines 58-67, col. 3, lines 1-20); receiving said first message at said 
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receiver(see col. 7, lines 36-65); decrypting said first message encrypted at said first level of 
encryption(see col. 7, lines 36-65); transmitting a Decreased-Security-Authorization Code to 
change from said first level of decryption to a second level of decryption(see col. 3, lines 12-58); 
receiving said Decreased-Security- Authorization-Code; determining a change in encryption level 
from said first level of encryption to said second level of encryption(see fig. 3, lines 59-67, col. 
4, lines 1-20); adjusting said Security-Level-Status-Indicator at said receiver(see fig. 3 5 sheet 2); 
encrypting a second message at said second level of encryption(see col. 3, lines 59-67, col. 4, 
lines 1-5); transmitting said second message at said second level of encryption; receiving said 
second message at said receiver; and decrypting said second message at said receiver(see col. 4, 
lines 7-20, 49-67). 

33. As per claim 32, it is rejected under the same basis as claim 31. 

Response To Amendment 

34. The Applicant has added a new limitation to the claim language, "continuing operation of 
the processing system", is not disclosed in Grube. Grube discloses preventing operation at a 
lower level of security by causing the process to end. Therefore, since Grube discloses that the 
processing must be terminated in order to accomplish the act of preventing operation at a lower 
level of security, another reference has been brought in to meet this limitation. 

35. The Applicant states that Grube does not disclose code means for decrypting a decreased 
security authorization code. The Examiner disagrees with the Applicant. Grube discloses that 
the transmission security level is one of an algorithm, a key, or algorithm-key function(see col. 7, 
lines 27-28). Grube discloses that after receiving the encrypted data, the communication unit 
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decrypts the data(see col. 8, lines 3-5). The decrypted data is then transferred to the 



communication unit display(see col. 8, lines 7-8). 



Final, Necessitated By Amendment 



36. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E Jackson whose telephone number is (703) 306-0426. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Friday's. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (703) 305-9648. The fax phone numbers for the 



Conclusion 
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organization where this application or proceeding is assigned are (703) 305-0040 for regular 
communications and (703) 308-6306 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703) 305-3900. 




May 5, 2004 




SUPERVISORY PATENT EXAMINER 
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